Detailed overview of how Vibgyor Holidays processes personal and operational data to deliver bookings, support, and compliance obligations.
Last updated: 12 September 2026
Data processing means any operation performed on personal data — collection, storage, use, sharing, retention, and deletion. Vibgyor Holidays processes data primarily to help you plan and complete travel bookings and to support you before, during, and after your trip.
This page complements our Privacy Policy by focusing on processing purposes, categories, recipients, and retention logic in operational language.
Booking fulfilment: creating reservations, assigning vehicles/hotels, generating vouchers, and coordinating pickup times.
Customer communication: sending confirmations, itinerary updates, and responding to support requests.
Payments & reconciliation: verifying successful payments, investigating failed charges, and processing approved refunds.
Service improvement: analysing aggregated funnel metrics (search → detail → book) to improve package clarity.
Security & fraud prevention: detecting abusive automated traffic and protecting accounts.
Legal & accounting: retaining invoices and booking records as required for business and tax compliance.
Identity and contact details; booking preferences and special requests; payment status references; technical logs; and support correspondence.
Sensitive data is not sought by default. If you voluntarily share health or accessibility needs to arrange suitable transport/hotel, we use that information only to assist your request.
For customer bookings on our platform, Vibgyor Holidays typically acts as a data controller determining why and how data is used for travel services.
Hotels, transport operators, and technology vendors may act as independent controllers or processors depending on the context. We share the minimum necessary fields for fulfilment.
Internal teams: operations, support, and finance staff with role-based access.
Travel suppliers: only details required for the booked service.
Infrastructure providers: hosting, email, analytics, and payment gateways under service agreements.
Active booking data: retained through travel completion and a reasonable post-trip support window.
Financial records: retained for statutory periods applicable to accounting.
Marketing consents and analytics identifiers: retained according to tool settings and opt-out status.
When retention ends, we delete or anonymise data where feasible.
We apply access control, encryption in transit (HTTPS), and internal processes to limit unnecessary copies of customer data. Staff are expected to use data only for assigned work.
To ask how your booking data is processed, or to request correction/deletion where applicable, email support@vibgyorholidays.com with “Data Processing Request” in the subject line. Phone: 9889995999.
When you request a Delhi–Agra or Mathura day tour, we process contact details, travel date, passenger count, and vehicle preference to check availability and issue confirmation.
Pickup address or metro boarding point may be shared with the assigned driver/operator only for the service date. After the trip, financial records remain for accounting while operational chat notes may be summarised for quality review.
If you later request a refund, payment references are re-processed against the booking ID to determine eligibility under the Refund Policy.
We may use automated systems for spam filtering, rate limiting, and analytics aggregation. These tools support security and product improvement; they do not replace human review for refunds or complaint handling.
You can ask questions about processing related to your booking by emailing support with sufficient identity verification details.
